What Is Cyber Fraud? Types, Real Examples & How to Report It in India

In 2026, cyber fraud complaints had crossed 12.7 lakh between January 1 and June 30, with fraudulent transactions worth more than Rs 10,178 crore.

UPI scams, digital arrest schemes, loan app extortion, and SIM swap attacks continue to make up a significant share of financial crime across the country. Over the past five years, India has recorded more than ₹55,000 crore in cumulative cyber fraud losses. However, behind each of these losses, there’s a very common pattern: a fraudster exploiting trust, urgency, or identity to push a victim into acting before they've had time to think.

This guide breaks down what cyber fraud actually looks like in India today, how these losses happen, real cases from the field, how platforms like Sign3 catch fraud before funds leave an account, and the exact steps to follow when registering a complaint on the cyber fraud no.

Key Takeaways

• UPI fraud remains the highest-volume cyber fraud and online payment fraud category by transaction count.

• Digital arrest scams are India's fastest-growing cyber fraud and financial fraud threat. Investment scams cause the most financial damage of any fraud category, accounting for more than 75% of total losses reported in 2025.

• Report cyber fraud immediately through the 1930 helpline or cybercrime.gov.in. However, how promptly you lodge the complaint decides recovery odds.

• Device intelligence and behavioural biometrics help detect account takeover fraud and identity theft fraud before money moves.

• Most fraud losses are preventable at the verification stage, not the recovery stage.

What Is Cyber Fraud?

Cyber fraud is the deliberate use of digital platforms, online communication, or technology to deceive people or organisations into losing money, credentials, or access to their accounts. It shows up in familiar forms: UPI fraud, phishing, digital arrest scams, investment scams, and SIM swap attacks.

It's also one of the fastest-growing categories of financial crime in the world right now. As digital payments, online banking, and remote onboarding become part of everyday life, fraudsters have adapted just as quickly, learning to manipulate identities, devices, and user behaviour to slip past the systems built to stop them. Both individual consumers and businesses are affected by cyber fraud.

Cyber fraud in India is addressed by the Information Technology Act, 2000, along with provisions of the Bharatiya Nyaya Sanhita pertaining to cheating, criminal intimidation and identity theft.

Cyber Fraud vs Cybercrime at a Glance

Types of Cyber Fraud

Cyber fraud is a term used to describe a variety of scams that are used to obtain money, credentials, or sensitive information by deception. Some types of fraud are common across the globe, but some types have become very common in India due to the rise in UPI payments, digital lending and mobile banking. Here’s the table below mentioning some common types of Cyber Fraud.

High-Impact Cyber Fraud Threats in India

• UPI fraud: the highest-volume threat

UPI fraud leads every other category by transaction count, because the platform's speed works in the fraudster's favour. Most UPI fraud succeeds through social engineering rather than a technical breach; the victim approves the debit themselves, entering a genuine PIN in response to a fake collect request or QR code.

• Digital arrest scams: the fastest-growing threat

Digital arrest is currently the most psychologically damaging cyber fraud pattern in India, and its fastest-growing threat by value. Fraudsters impersonate central agencies over video call, using fake uniforms, forged documents and spoofed caller IDs to convince victims they are under criminal investigation. No Indian law authorises an arrest conducted by video call, but victims are isolated from family and pressured into transferring funds within hours, often to accounts described as under "secret supervision." For example, a retired income tax officer was allegedly duped of ₹51 lakh by fraudsters posing as Lucknow police officers in a fake money-laundering case. The investigation led to the arrest of a mule account operator, who allegedly provided bank accounts to cyber fraudsters. (Source: Times of India)

• Loan app fraud: unregulated and hard to trace

Loan app fraud has become a persistent threat in India, driven by unregulated lending platforms that operate outside RBI oversight. Such apps provide fast loans with little paperwork, but they ask for broad permissions, including access to a borrower’s contacts, messages and photo gallery. This data is exploited by fraudsters to threaten and harass consumers and their contacts when payments are late or missed.

• SIM swap fraud: the hardest to detect early

SIM swap fraud targets the telecom layer rather than the bank, which makes it harder to catch with standard banking controls. Once a fraudster controls a victim's number, they can reset passwords and intercept OTPs across every linked account. A sudden, unexplained loss of mobile signal is usually the only early warning a victim gets.

Real-World Cyber Fraud Cases from 2026

Here are some verified, dated cases and official disclosures from 2026, each with its original source.

• Digital arrest scam, Mangaluru: In April 2026, an elderly man lost ₹2.07 crore after fraudsters posing as government investigators convinced him he was under formal criminal investigation and held him on video call for hours.

• Government fraud recovery data: In March 2026, the Ministry of Home Affairs told the Rajya Sabha that over ₹8,600 crore had been saved across more than 24 lakh cyber fraud complaints. Additionally, more than 27 lakh mule accounts were flagged to participating banks and involved in fraud.

• UPI fraud scale: Government data released in 2026 says that UPI fraud touched Rs 805 crore in 10.64 lakh incidents in just the first eight months of FY26. This was done through fake collect requests, QR code swaps and scams run through resale marketplaces.

• Loan app fraud, legal precedent: In February 2026, the Supreme Court on Tuesday upheld the quashing of money laundering proceedings against a payment gateway associated with an alleged illegal loan app network, saying there was no evidence to suggest the intermediary knowingly participated in the fraud.

How Detection Technology Stops Cyber Fraud

Most banks still rely on rules-based fraud systems: velocity limits, blocklists, fixed transaction thresholds. Traditional rules detect known patterns such as unusually large transactions, rapid transaction spikes, repeated login failures, or activity from blacklisted accounts. But a cyber fraudster only needs to change one detail to slip past a static rule.

Modern detection technology closes that gap by reading multiple real-time signals instead of matching against a fixed list. The core components behind effective cyber fraud detection include:

• AI-driven risk scoring

Instead of relying on preset rules, this component learns from millions of past sessions to understand what normal behaviour actually looks like, and what doesn't. It scores risk in real time, which means it can flag suspicious activity that a static rule would simply never notice.

Read more: AI Fraud Detection: The Complete Guide for Banks & Fintechs in 2026

• Device intelligence

Before a session is ever trusted, device intelligence helps identify indicators such as emulators, rooted devices, GPS spoofing, and cloned apps. If the device itself looks suspicious, everything that happens afterwards gets treated with extra caution.

• Behavioural biometrics

This technique pays attention to how someone actually uses their device: typing rhythm, how fast they move through screens, the pattern of their touch. It can detect subtle signs of fraud, such as a genuine user being coached by a fraudster during a call, even when the login credentials are valid.

Read more: What Is behavioural Biometrics? A Complete Guide

• Digital footprint analysis

Digital footprint cross-checks identity signals across a wider picture, surfacing mule accounts and synthetic identities before any funds actually move. By analysing broader patterns rather than individual transactions, it can detect fraud that other detection methods may miss.

Sign3 operates at the fraud intelligence and risk assessment stage, combining device intelligence, behavioural biometrics and digital footprint signals into a single real-time risk score. This score helps banks, NBFCs and fintechs catch cyber fraud before money moves, rather than during a loss review weeks later. For institutions handling UPI, digital lending or account onboarding at scale, that shift from reactive to predictive fraud detection is necessary before money moves.

Read more: What Is a Digital Footprint? A Guide to Fraud Prevention

How Sign3 Uncovered a Coordinated Fraud Network Before Disbursal

Problem Faced

A lender started seeing a steady rise in loan and account applications that looked clean on paper. Each one used a different identity and cleared the standard KYC checks: document verification, face match, OTP validation- all passed. But fraud losses kept rising, which pointed to something more organised behind these seemingly genuine applications.

Sign3 Solution

Instead of reviewing each application separately, Sign3 looked at device intelligence and behavioural biometrics across the application. That comparison surfaced a significant pattern: several applications were coming from the same device cluster, with near-identical navigation habits, interaction timing, and submission windows. Together, these signals pointed to one coordinated fraud ring operating under multiple fake identities.

Impact

Applications that would likely have passed traditional screening were flagged before funds were disbursed. By connecting device and behavioural signals across applications, Sign3 helped expose the broader fraud ring, enabling faster investigation and reducing potential fraud losses.

Warning Signs of Cyber Fraud

Cyber fraud rarely happens without warning. Most scams follow a predictable script, one built to create urgency, manufacture trust, or pressure people into acting before they stop to verify anything. Learning to identify these patterns early is one of the simplest and most effective ways to protect your money and your identity.

• You're asked to share sensitive information. Never share money, OTPs, passwords, banking credentials, or personal information. Legitimate organisations do not request such information through unsolicited calls, messages, or video calls.

• Someone claims to be from law enforcement or a regulator. A caller or video caller says they're from the police, CBI, ED, RBI, or a telecom regulator, and demands money, OTPs, or bank details to help you "avoid arrest." No genuine agency operates this way over a phone call.

• You're told to stay on the line and stay silent. If you're instructed not to disconnect the call and not to tell family members or colleagues what's happening, that's not protocol. That's isolation, and it's one of the clearest signs of a scam in progress.

• A "refund" quietly debits your account instead. A payment request disguised as a refund, cashback, or collect request actually pulls money out of your account rather than putting it in. Always read the request carefully before approving anything on UPI

• A loan app that needs more than the usual information. If a lending app is asking for your entire contact list, photo gallery, and also asking you to pay upfront or giving a loan without any documentation and without any CIBIL check, walk away. This is not what legitimate lenders do.

• Your signal disappears without explanation. You suddenly find “No Service” or “Emergency Calls Only” on your phone in an area where you usually have good coverage. This may mean someone is taking your number over (SIM swap).

• An investment platform won't let you withdraw. Profits keep increasing, but withdrawals get blocked or delayed, or you're suddenly asked to pay an extra "tax" or "unlock fee" to access your own money. This is one of the most common patterns behind India's investment scam losses.

• A message pushes urgency instead of your bank's app. You get a text about a suspended account or a missed delivery, and it steers you toward a link rather than your bank's verified app or website. Genuine alerts don't rely on panic to get your attention.

• You're asked to install remote access software. Someone posing as customer support asks you to install AnyDesk, TeamViewer, or a similar app. Once installed, they can see and control your device directly, including your banking apps.

How to Report Cyber Fraud in India

Cyber fraud reporting in India runs through two connected government channels: the 1930 cyber fraud helpline number and the National Cyber Crime Reporting Portal at cybercrime.gov.in, both run under the Indian Cyber Crime Coordination Centre (I4C). Speed matters more than almost any other factor in whether stolen funds can be frozen before they move on, since most cyber fraud money is layered across multiple accounts within the first hour, often called the golden hour of cyber fraud reporting. Follow the steps below to report cyber fraud:

• Golden Hour Rule. Most cyber fraud money is moved across multiple accounts within the first hour. Reporting the incident immediately through the 1930 cyber fraud no improves the chances of tracing and freezing funds before they disappear into a wider network. Complaints above ₹10 lakh are escalated automatically to a Zero FIR.

• File a complaint at cybercrime.gov.in. Select Report Financial Fraud for money-related cyber fraud, or Report Other Cyber Crime for identity theft, harassment, or social media offences, and register with your mobile number and OTP.

• Enter complete incident details: date, time, amount, transaction ID or UTR number, and the phone number, UPI ID, app or website used by the fraudster.

• Upload evidence. Screenshots of chats, payment confirmations, call logs, and any documents the fraudster sent all strengthen the complaint.

• Save your acknowledgement number. The portal generates a 14-digit acknowledgement number needed to track your complaint and follow up with the helpline or your bank.

• Inform your bank directly. A parallel complaint to your bank's fraud helpline can prompt an internal hold on the transaction, independent of the government process.

For banks, fintechs and digital platforms, encouraging affected customers to report fraud immediately through the correct channels can improve fund recovery prospects and support subsequent investigations.

Stop Cyber Fraud Before the Money Moves

In India, cyber fraud doesn't wait. A stolen identity or a compromised device can turn into a drained account in minutes, often before a bank even knows something is wrong. That speed is exactly why detection has to move faster to prevent fraud.

Sign3 brings together device intelligence, behavioural biometrics, and digital footprint signals to create a single real-time risk score. This gives banks, NBFCs, and fintechs the ability to spot fraud as it happens and stop funds from moving, not after the damage is done. Book a demo today and see how Sign3 helps you stay ahead of fraud, not behind it.

Frequently Asked Questions

Is cyber fraud the same as cybercrime?

No. Cybercrime is the umbrella term for any offence committed using a computer, network or digital device, covering acts with no financial motive at all, such as hacking, cyberstalking and cyberterrorism. Cyber fraud is a subset limited to deception carried out for financial gain: tricking someone into transferring money, sharing credentials or approving a fraudulent transaction.

Can money lost to cyber fraud be recovered?

Yes, money lost to cyber fraud can sometimes be recovered, but the chances of recovery depend largely on how fast the fraud is reported. Law enforcement agencies and financial institutions have the greatest opportunity to freeze or trace funds during the first few hours after a fraudulent transaction, often referred to as the “golden hour.”

Victims should call the 1930 cybercrime helpline immediately, report the incident on the National Cyber Crime Reporting Portal, and inform their bank or payment service provider.

Is cyber fraud a crime in India?

Yes. Cyber fraud is a criminal offence in India and can attract penalties ranging from fines to imprisonment, depending on the nature and severity of the offence. It is a punishable act under the Information Technology Act, 2000, along with sections of the Bharatiya Nyaya Sanhita covering cheating, criminal breach of trust, and identity theft.

How soon should I report cyber fraud in India?

Report cyber fraud within the first hour, known as the golden hour. Calling the 1930 cyber fraud number immediately lets banks freeze funds before a cyber fraudster moves them across multiple accounts, sharply improving recovery odds.

Does cyber fraud reporting cost anything?

No. Calling on cyber fraud no 1930 and filing a complaint on cybercrime.gov.in are both completely free. Cyber fraud reporting through official government channels never requires any payment. If you find that any caller is demanding a fee to process your complaint, then it is in itself a cyber fraud.

Can I report cyber fraud if I don't know the fraudster's identity?

Yes. You can report cyber fraud without knowing the fraudster's identity. File using whatever details you have: transaction ID, UPI ID, phone number, or screenshots, since most cyber fraudsters operate from a different city or country than their victims.

What is a mule account in cyber fraud, and why does it matter?

A mule account is a bank account that is opened to receive and transfer stolen money quickly, often with someone else's documents. Early detection technology identifies these accounts, and that’s critical to stopping cyber fraud before money disappears.